$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7980d2a9-9ad0-487c-82a5-834ec5af0a39.roa File: 7980d2a9-9ad0-487c-82a5-834ec5af0a39.roa (raw, json) Hash identifier: zpj9TuuKywRZzjjtHaZ/D2QW3EeytilgeLfNfDuMMbU= Subject key identifier: D6:5C:DF:70:09:59:9D:62:36:74:6E:D6:FE:8A:4D:7E:E8:90:3D:AD Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0804C06DCEBF7F1A531AFFE0B5BA13C3F2625A9D Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7980d2a9-9ad0-487c-82a5-834ec5af0a39.roa Signing time: Sun 11 Oct 2026 15:08:35 +0000 ROA not before: Sun 11 Oct 2026 15:08:35 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:a::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:04:c0:6d:ce:bf:7f:1a:53:1a:ff:e0:b5:ba:13:c3:f2:62:5a:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 11 15:08:35 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=8349935f098ec4270e0c9d1703ddedf0a1d2524b52aeb3ea2e606c1c1aba490f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6e:c8:dc:ec:68:f7:70:83:b9:47:19:77:ad: 98:8d:58:38:41:3a:36:ae:75:ca:59:9d:e8:8a:f5: 86:b8:6e:92:01:95:38:7b:18:b9:9d:0a:ff:8c:24: 85:76:e1:60:1d:50:23:f9:12:71:e6:25:b6:de:10: de:53:79:a7:59:1d:60:f6:4c:88:d6:15:fd:48:97: 67:86:04:4e:b7:a1:19:cf:f8:a3:e3:34:29:48:49: 43:18:55:f2:c9:f6:17:c8:98:66:22:97:64:70:2a: c2:fc:b8:42:0a:e6:58:49:bc:42:7f:4b:91:2c:4a: 37:73:7d:d6:d9:96:7f:ef:7d:1c:fc:b3:9b:d2:a9: a7:13:17:d7:17:af:95:28:f3:18:3a:9d:e7:35:ec: e5:d8:3d:2e:3d:ec:1c:c3:76:38:5a:ee:79:f6:3b: 57:5e:6b:3c:c7:cf:ba:92:20:e6:3b:89:bc:4d:ab: c2:20:37:5c:f4:e0:03:fb:64:27:4a:1a:f3:50:9c: ec:f2:7e:7f:b2:73:f0:c5:e5:1a:dd:a4:eb:c7:dd: c4:c8:0d:a9:54:ca:97:54:fc:9a:44:06:40:01:f9: 1f:07:22:55:6d:08:c6:57:fb:3b:0e:b2:e9:8b:52: e9:60:e2:9e:67:c3:47:aa:93:a0:59:fe:42:4f:20: a5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:5C:DF:70:09:59:9D:62:36:74:6E:D6:FE:8A:4D:7E:E8:90:3D:AD X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7980d2a9-9ad0-487c-82a5-834ec5af0a39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:a::/47 Signature Algorithm: sha256WithRSAEncryption 04:4c:3e:a2:c2:43:ad:a8:63:40:cf:1e:8a:40:a3:20:34:6d: cf:f0:5c:06:7c:8c:c0:64:25:08:10:93:e7:4e:75:11:4e:05: 3b:3b:92:21:e0:12:77:7b:93:8e:ca:7e:bc:42:62:87:be:99: 3d:a2:ca:29:c9:0d:86:46:82:cf:7d:4f:4f:56:ae:81:9b:d8: b1:c1:e3:63:c5:fc:a0:38:7b:b8:95:76:35:c3:3c:0d:9c:dc: 89:c9:bd:b1:4e:da:d2:0a:56:5b:f2:21:20:f7:53:fa:aa:2a: 3a:be:b8:53:69:92:49:7e:81:92:64:3d:c1:a4:ff:c3:9c:11: 25:37:53:51:ed:46:33:cd:43:be:1f:2e:1b:d8:65:21:4a:86: b4:80:62:91:59:0d:e7:a3:6a:51:3f:b8:b4:39:61:ea:de:6f: 09:da:ca:5f:92:96:e8:34:10:9d:d3:d0:fc:0f:27:10:3c:c4: 12:24:23:18:bc:53:79:01:4b:73:83:39:8c:26:39:fd:45:2f: 60:1e:c9:cb:3d:58:56:5c:98:9c:04:7c:be:2c:25:11:92:51: f2:f7:9f:21:11:be:f0:19:56:b0:ba:6f:8f:99:ad:1b:21:37: d9:a7:5c:b0:79:15:4c:d5:b4:81:9e:36:27:28:2d:f8:b9:cb: c5:08:c5:8b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCATAbc6/fxpTGv/gtboTw/JiWp0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDExMTUwODM1WhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MzQ5OTM1ZjA5OGVjNDI3MGUwYzlkMTcwM2RkZWRmMGEx ZDI1MjRiNTJhZWIzZWEyZTYwNmMxYzFhYmE0OTBmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWbsjc7Gj3cIO5Rxl3rZiNWDhBOjaudcpZneiK9Ya4bpIB lTh7GLmdCv+MJIV24WAdUCP5EnHmJbbeEN5TeadZHWD2TIjWFf1Il2eGBE63oRnP +KPjNClISUMYVfLJ9hfImGYil2RwKsL8uEIK5lhJvEJ/S5EsSjdzfdbZln/vfRz8 s5vSqacTF9cXr5Uo8xg6nec17OXYPS497BzDdjha7nn2O1deazzHz7qSIOY7ibxN q8IgN1z04AP7ZCdKGvNQnOzyfn+yc/DF5RrdpOvH3cTIDalUypdU/JpEBkAB+R8H IlVtCMZX+zsOsumLUulg4p5nw0eqk6BZ/kJPIKWtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU1lzfcAlZnWI2dG7W/opNfuiQPa0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzc5ODBkMmE5LTlhZDAtNDg3Yy04MmE1LTgzNGVjNWFmMGEzOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAPDwAAowDQYJKoZIhvcNAQELBQADggEBAARMPqLCQ62oY0DPHopAoyA0 bc/wXAZ8jMBkJQgQk+dOdRFOBTs7kiHgEnd7k47KfrxCYoe+mT2iyinJDYZGgs99 T09WroGb2LHB42PF/KA4e7iVdjXDPA2c3InJvbFO2tIKVlvyISD3U/qqKjq+uFNp kkl+gZJkPcGk/8OcESU3U1HtRjPNQ74fLhvYZSFKhrSAYpFZDeejalE/uLQ5Yere bwnayl+Slug0EJ3T0PwPJxA8xBIkIxi8U3kBS3ODOYwmOf1FL2Aeycs9WFZcmJwE fL4sJRGSUfL3nyERvvAZVrC6b4+ZrRshN9mnXLB5FUzVtIGeNicoLfi5y8UIxYs= -----END CERTIFICATE-----Generated at Sun Nov 1 13:03:23 2026 by rpki-client